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This listing of claims will replace all prior versions, and listings, of claims in the 

application: 
Listing of Claims; 

1 . (Currently Amended ) A system comprising: 

a short-range ad hoc network that connects a wireless device to a nearby wireless 
device, each device including a memory device; and 

a processor disposed in communication with the memory device, the processor 
configured to: 

store an application directory in a middleware layer, the directory having at least one 
entry, each entry including an application program identifier, attributes, and security parameters; 

determine a priority for each entry in the application directory; 

identify a selected entry based on the priority; 

examine the attributes and the security parameters for the selected entry; and 

independently e stablish a security association to support ^ a data communication when 
the security parameters direct the selected entry to use a secure cormection. 

2. (Original) The system of claim 1 , wherein the processor is further configured 

to: 

receive a connection request from the nearby wireless device; and 
send a first application directory to the nearby wireless device; 
receive a second application directory fi-om the nearby wireless device; and 
create the application directory by combining the first application directory and the 
second application directory. 

3 . (Original) The system of claun 1 , wherein the attributes include a device 
identifier, a role, and control parameters. 
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4. (Original) The system of claim 3, wherein the control parameters include an 
apphcation state, and at least one user-defined application setting. 

5. (Original) The system of claim 1 , wherein a bit-string includes the security 
parameters, a value of the bit-string representing each of the security parameters. 

6. (Original) The system of claim 1 , wherein the security parameters include an 
information security objective, a cryptography method for attaining the information security 
objective, and a level of security. 

7. (Original) The system of claim 6, wherein the information security objective 
includes maintaining confidentiality, ensuring integrity, authenticating a party, and protecting 
against replay or reuse. 

8. (Original) The system of claim 6, wherein the cryptography method includes 
a signature verification service, and an encryption algorithm. 

9. (Original) The system of claim 6, wherein the level of security is a minimum 
required level of security. 

1 0. (Original) The system of claim 1, wherein to determine the priority for each 
entry, the processor is fiirther configured to: 

compare the attributes for each entry in said at least one entry. 

1 1 . (Original) The system of claim 1 , wherein to establish the security 
association, the processor is further configured to: 

query a database for an existing security association between the wireless device and the 
nearby wireless device that will satisfy the security parameters; 

reuse the existing security association when the query of the database is successful; and 
create a new security association when the query of the database is unsuccessful. 
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1 2. (Original) The system of claim 1 1 , wherein the processor is fUrther 
configured to: 

store the new security association in a connection log, 

wherein the query of the database includes examination of the connection log. 

1 3 . (Original) The system of claim 1 1 , wherein to reuse the existing security 
association, the processor is further configured to: 

notify the wireless device of the existing security association; 

notify the nearby wireless device of the existing security association; 

launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the laimch of the application program; and 

communicate over the secure connection with a counterpart application program on the 
nearby wireless device. 

14. (Original) The system of claim 1 1 , wherein to create the new security 
association, the processor is further configured to: 

update the priority of the selected entry to defer the creating of the new security 
association. 

1 5 . (Original) The system of claim 1 1 , wherein to create the new security 
association, the processor is further configured to: 

establish a privileged side channel to the nearby wireless device; 
negotiate the new security association over the privileged side channel; and 
store the new security association. 
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16. (Original) The system of claim 1 5, wherein the privileged side channel 
includes a proximity-based communication means, including an injfrared data association port, or 
a direct connection. 

1 7. (Original) The system of claim 15, wherein to negotiate the new security 
association, the processor is fiirther configured to: 

send authentication data to the nearby wireless device; 

receive counterpart authentication data from the nearby wireless device; and 
generate the new security association based on the authentication data and the counterpart 
authentication data. 

1 8 . (Original) The system of claim 1 , wherein when the security parameters 
direct the selected entry to use a non-secure connection, the processor is further configured to: 

notify the wireless device of the non-secure cormection; 

notify the nearby wireless device of the non-secure connection; 

launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicate over the non-secure cormection with a counterpart application program on 
the nearby wireless device. 

1 9. (Original) The system of claim 1 , wherein the wireless device mitiates the 
data commtinication. 

20. (Original) The system of claim 1 , wherein the wireless device stores the 
application directory. 

2 1 . (Currently Amended) A method comprising: 

connectuig a wireless device to a nearby wireless device in a short-range network 
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storing an application directory in a memory including a middleware layer, the directory 
having at least one entry, each entry including an application program identifier, attributes, and 

security parameters; 

determining a priority for each entry in the application directory; 
identifying a selected entry based on the priority; 

examining the attributes and the security parameters for the selected entry; and 

independently establishing a security association to support the data communication 
when the security parameters direct the selected entry to use a secure connection. 

22. (Original) The method of claim 21, further comprising: 
receiving a cormection request from the nearby wireless device; and 

sending a first application directory to the nearby wireless device; 

receiving a second application directory from the nearby wireless device; and 

creating the application directory by combming the first application dkectory and the 
second application directory. 

23 . (Original) The method of claim 21 , wherein the attributes include a device 
identifier, a role, and control parameters. 

24. (Original) The method of claim 23, wherein the control parameters include an 
application state, and at least one user-defined application setting. 

25 . (Original) The method of claim 2 1 , wherein a bit-string mcludes the security 
parameters, a value of the bit-string representing each of the security parameters. 

26. (Origmal) The method of claim 2 1 , wherein the security parameters include 
an information security objective, a cryptography method for attaining the information security 
objective, and a level of security. 



95744 vl 



-6- 



Serial No. 10/784,215 

Response to January 31. 2008 Office Action 



Docket No. 4208-4163 



27. (Original) The method of claim 26, wherein the information security 
objective includes maintaining confidentiality, ensuring mtegrity, authenticating a party, and 
protecting against replay or reuse. 

28. (Original) The method of claim 26, wherein the cryptography method 
includes a signature verification service, and an encryption algorithm. 

29. (Original) The method of claim 26, wherein the level of security is a 
minimum required level of security. 

30. (Original) The method of claim 2 1 , wherein the determining of the priority 
for each entry further comprises: 

comparing the attributes for each entry iii said at least one entry. 

3 1 . (Original) The method of claim 2 1 , wherein the establishing of the security 
association further comprises: 

querying a database for an existing security association between the wireless device and 
the nearby wireless device that will satisfy the security parameters; 

reusing the existing security association when the query of the database is successful; and 
creating a new security association when the query of the database is unsuccessful. 

32. (Original) The method of claun 3 1 , further comprising: 
storing the new security association in a connection log, 

wherein the query of the database includes examination of the connection log. 

33 . (Original) The method of claim 3 1 , wherein the reusing of the existing 
security association further comprises: 

notifying the wireless device of the existing security association; 

notifying the nearby wireless device of the existing security association; 
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launching an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicating over Uie secure connection with a counterpart application program on the 
nearby wireless device. 

34. (Original) The method of claim 3 1 , wherein the creating of the new security 

association further comprises: 

updating the priority of the selected entry to defer the creating of the new security 
association. 

3 5 . (Original) The method of claim 3 1 , wherein the creating of the new security 
association further comprises: 

establishing a privileged side chaimel to the nearby wireless device; 
negotiating the new security association over the privileged side channel; and 
storing the new security association. 

36. (Original) The method of claim 35, wherein the privileged side channel 
includes a proximity-based communication means, including an infrared data association port, or 
a direct connection. 

37. (Original) The method of claim 35, wherein the negotiating of the new 
security association further comprises: 

sending authentication data to the nearby wireless device; 

receiving counterpart authentication data from the nearby wireless device; and 
generating the new security association based on the authentication data and the 
cotmterpart authentication data. 
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3 8 . (Original) The method of claim 2 1 , wherein when the security parameters 
direct the selected entry to use a non-secure connection, the method further comprises: 

notifying the wireless device of the non-secure connection; 

notifying the nearby wireless device of the non-secure connection; 

launching an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicating over the non-secure connection with a counterpart application program 
on the nearby whreless device. 

39. (Original) The method ofclaim 21, wherein the wireless device initiates the 
data communication. 

40. (Original) The method of claim 21 , wherein the wireless device stores the 
application directory. 

4 1 . Currently Amended) A computer program product, tangibly stored on a 
computer-readable medium, executable in a computer system, for controlling data 
communication in an ad hoc network that connects a wireless d e vice and a nearby wir e l e ss 
de\4ee, comprising instructions operable to cause a programmable processor to: 

store an application directory in a memory including a middleware layer of a device in an 
ad hoc network, the directory having at least one entry, each entry including an application 
program identifier, attributes, and security parameters; 

determine a priority for each entry in the application directory; 

identify a selected entry based on the priority; 

examine the attributes and the security parameters for the selected entry; and 
independently establish a security association to support the data commimication when 
the security parameters direct the selected entry to use a secure cormection. 
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42. (Original) The computer program product of claim 4 1 , further comprising 
instructions operable to cause the programmable processor to: 

receive a connection request from the nearby wireless device; and 

send a first application directory to the nearby wireless device; 

receive a second application directory from the nearby wireless device; and 

create the application directory by combining the first appUcation directory and the 
second appUcation directory. 

43 . (Original) The computer program product of claim 4 1 , further comprising 
instructions operable to cause the programmable processor to: 

compare the attributes for each entry in said at least one entry. 

44. (Original) The computer program product of claim 41, further comprising 
instructions operable to cause the programmable processor to: 

query a database for an existing security association between the wireless device and the 
nearby wireless device that will satisfy the security parameters; 

reuse the existing security association when the query of the database is successful; and 

create a new security association when the query of the database is unsuccessful. 

45. (Original) The computer program product of claim 44, fiirther comprising 

instructions operable to cause the programmable processor to: 

store the new secimty association in a connection log, 

wherein the query of the database includes examination of the connection log. 

46. (Original) The computer program product of claim 44, further comprising 

instructions operable to cause the programmable processor to: 

notify the wireless device of the existing security association; 
notify the nearby wireless device of the existing security association; 
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launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicate over the secure coimection with a counterpart application program on the 
nearby wireless device. 

47. (Original) The computer program product of claim 44, further comprising 
instructions operable to cause the programmable processor to: 

update the priority of the selected entry to defer the creating of the new security 
association. 

48 . (Original) The computer program product of claim 44, further comprising 
instructions operable to cause the programmable processor to: 

estabUsh a privileged side channel to the nearby wireless device; 
negotiate the new security association over the privileged side chaimel; and 
store the new security association. 

49. (Original) The computer program product of claim 48, further comprising 
instructions operable to cause the programmable processor to: 

send authentication data to the nearby wireless device; 
receive counterpart authentication data from the nearby wireless device; and 
generate the new security association based on the authentication data and the counterpart 
authentication data. 

50. (Original) The computer program product of claim 41, wherein when the 
security parameters direct the selected entry to use a non-seciire coimection, the computer 
program product further comprises instructions operable to cause the programmable processor 
to: 

notify the wireless device of the non-secure connection; 
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notify the nearby wireless device of the non-secure connection; 

launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

coimnunicate over the non-secure connection with a counterpart application program on 
the nearby wireless device. 

51 . (Currently Amended) A system comprising: 

means for storing an application directory in a memory including a middleware layer of a 
device in an ad hoc network, the directory having at least one entry, each entry including an 

application program identifier, attributes, and security parameters; 

means for determining a priority for each entry in the application directory; 
means for identifying a selected entry based on the priority; 

means for examining the attributes and the security parameters for the selected entry; and 

means for independently establishing a security association to support the data 
communication when the security parameters direct the selected entry to use a secure coimection. 

52. (Original) The system of claim 5 1 , further comprising: 

means for receiving a connection request from the nearby wireless device; and 
means for sending a first application directory to the nearby wireless device; 
means for receiving a second application directory from tiie nearby wireless device; and 
means for creating the application directory by combining the first application directory 
and the second application directory. 

53 . (Original) The system of claim 5 1 , wherein the determining of the priority for 
each entry fiirther comprises: 

means for comparing the attributes for each entry in said at least one entry. 
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54. (Original) The system of claim 5 1 , wherein the means for the estabUshing of 
the security association ftirther comprises: 

means for querying a database for an existing security association between the wireless 
device and the nearby wireless device that will satisfy the security parameters; 

means for reusing the existing security association when the query of the database is 
successful; and 

means for creating a new security association when the query of the database is 
unsuccessful. 

55. (Original) The system of claim 54, ftirther comprising: 
means for storing the new security association in a connection log, 
wherein the query of the database includes examination of the connection log. 

56. (Original) The system of claim 54, wherein the means for the reusing of the 
existing security association further comprises: 

means for notifying the wireless device of the existing security association; 

means for notifying the nearby wireless device of the existing security association; 

means for launching an application program that is referenced by the appUcation program 
identifier associated with the selected entry when the attributes associated with the selected entry 
indicate an accommodating state for the launch of the application program; and 

means for communicating over the secure cormection with a counterpart application 
program on the nearby wireless device. 

57. (Original) The system of claim 54, wherein the means for the creating of the 
new security association further comprises: 

means for updating the priority of the selected entry to defer the creating of the new 
security association. 
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58. (Original) The system of claim 54, wherein the means for the creating of the 
new secxarity association further comprises: 

means for establishing a privileged side channel to the nearby wireless device; 

means for negotiating the new security association over the privileged side channel; and 

means for storing the new security association. 

59. (Original) The system of claim 58, wherein the means for the negotiating of 
the new security association fiirther comprises: 

means for sending authentication data to the nearby wireless device; 

means for receiving coimterparl authentication data from the nearby wireless device; and 

means for generating the new security association based on the authentication data and 
the counterpart authentication data. 

60. (Original) The system of claim 5 1 , wherein when Hie security parameters 
direct the selected entry to use a non-secure connection, further comprising: 

means for notifying the wireless device of the non-secure connection; 

means for notifying the nearby wireless device of the non-secure connection; 

means for launching an application program that is referenced by the application program 
identifier associated with the selected entry when the attributes associated with the selected entry 
indicate an accommodating state for the launch of the application program; and 

means for communicating over the non-secure coimection with a counterpart application 
program on the nearby wireless device. 

61 . (Previously Presented) A system comprising: 

a short-range ad hoc network that coimects a wireless device to a nearby vyireless device, 
each device including 

a memory device; and 
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a processor disposed in communication with the memory device, the processor 
configured to: 

store in a middleware layer in the memory of the wireless device a security association 
between the wireless device and the nearby wireless device when the nearby wireless device 
enters tiie ad-hoc network for a first encounter; 

store a copy of the security association; 

remove the security association when the first encounter terminates; and 

independently establish a secure connection to the nearby wireless device based on the 
copy of the security association when the nearby wireless device enters the ad-hoc network for a 
second encounter. 

62. (Original) The system of claim 6 1 , wherein the storing of the security 
association is to a short-term storage device. 

63 . (Original) The system of claim 6 1 , wherein the storing of the copy of the 
security association is to a long-term storage device. 

64. (Original) The system of claim 61 , wherein to establish the secure connection 
to the nearby wireless device based on the copy of the security association when the nearby 
wireless device enters the ad-hoc network for the second encounter, the processor is further 
configured to: 

search a coimection log to locate the copy of the security association; 

launch the appUcation program associated with the copy of the security association; 

configure the secure coimection usmg the security parameters associated with the copy of 
the security association; and 

communicate over the secure coimection with the counterpart application program. 

65. (Original) The system of claim 64, wherein the processor is further 
configured to: 
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verify that the copy of the security association will satisfy the security parameters for the 
second encounter. 

66. (Original) The system of claim 64, wherein to search the connection log to 

locate the copy of the security association, the processor is further configured to: 

retrieve at least one previous connection from the connection log; and 

identify one of said at least one previous connection as the copy of the security 
association. 

67. (Currently Amended) A method comprising: 

storing a security association in a memory including a middleware laver between #ie-a 
wireless device and the nearby wireless devic e in an ad hoc network w hen the nearby wireless 
device enters the ad-hoc network for a first encounter; 

storing a copy of the security association; 

removing the security association when the first encounter terminates; and 

independently establishing a secure connection to the nearby wireless device based on the 
copy of the security association when the nearby wireless device enters the ad-hoc network for a 
second encotmter. 

68. (Original) The method of claim 67, wherein the storing of the security 
association is to a short-term storage device. 

69. (Original) The method of claim 67, wherein the storing of the copy of the 
security association is to a long-term storage device. 

70. (Original) The method of claim 67, wherein the establishing of the secure 
connection to the nearby wireless device based on the copy of the security association when the 
nearby wireless device enters the ad-hoc network for the second encounter further comprises: 

searching a cormection log to locate the copy of the sectirity association; 
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launching the application program associated with the copy of the security association; 

configuring the secure connection using the security parameters associated with the copy 
of the security association; and 

communicating over the secure connection with the counterpart application program. 

7 1 . (Original) The method of claim 70, further comprising: 

verifying that the copy of the security association will satisfy the security parameters for 
the second encounter. 

72. (Original) The method of claim 70, wherein the searching of the connection 
log to locate the copy of the security association further comprises: 

retrieving at least one previous connection from the coimection log; and 

identifying one of said at least one previous connection as the copy of the security 
association. 

73 . (Previously Presented) A computer program product, tangibly stored on a 
computer-readable medium, executable in a computer system, for r e connecting to a secure 
conn e ction in an ad - hoc network that connects a wir e less device and a nearby wir e less devic e , ' 
th e wirel e ss device storing an application dir e ctory having an entry that associates an application 
program on the wirel e ss device to a count e rpart application program on th e nearby wireless 
device, th e e ntry including on application program id e ntifi e r, attribut e s, and s e curity param e ters, 
comprising instructions operable to cause a programmable processor to: 

store a security association in a memorv of a wireless device including a middleware 
layer in an ad hoc network a security association between the wireless device and ^ [a] nearby 
wireless device when the nearby wireless device enters the ad-hoc network for a first encoimter; 

store a copy of the security association; 

remove the security association when tiie first encounter terminates; and 
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independently establish a secure connection to the nearby wireless device based on the 
copy of the sectirity association when the nearby wireless device enters the ad-hoc network for a 
second encounter. 

74. (Original) The computer program product of claim 73, further comprising 
instructions operable to cause the programmable processor to: 

seM-ch a cormection log to locate the copy of the security association; 

launch the application program associated with the copy of the security association; 

configure the secure coimection using the security parameters associated with the copy of 
the security association; and 

communicate over the secure connection with the counterpart application program. 

75 . (Original) The computer program product of claim 74, further comprising 
instructions operable to cause the programmable processor to: 

verify that the copy of the security association will satisfy the security parameters for the 
second encounter. 

76. (Original) The computer program product of claim 74, further comprising 
instructions operable to cause titie programmable processor to: 

retrieve at least one previous cormection from the cormection log; and 

identify one of said at least one previous connection as the copy of the security 
association. 

77. (Previously Presented) A system comprising: 

means for storing in a memory of a wireless device including a middleware a security 
association between the wireless device and ^ [a] nearby wireless device when the nearby 
wireless device enters Sie an ad-hoc network for a first encovmter; 

means for storing a copy of the security association; 
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means for removing the security association when the first encounter terminates; and 
means for independently establishing a secure connection to the nearby wireless device 

based on the copy of the security association when the nearby wireless device enters the ad-hoc 

network for a second encounter. 

78. (Original) The system of claim 77, wherein the means for establishing the 
secure coimection to the nearby wireless device based on the copy of the security association 
when the nearby wireless device enters the ad-hoc network for the second encounter further 
comprises: 

means for searching a coimection log to locate the copy of the security association; 
means for lavmching the application program associated with the copy of the security 
association; 

means for configuring the secure coimection using the security parameters associated 
with the copy of the security association; and 

means for communicating over the secure connection with the counterpart application 
program. 

79. (Original) The system of claim 78, further comprising: 

means for verifying that the copy of the security association will satisfy the security 
parameters for the second encounter. 

80. (Original) The system of claim 78, wherein the means for searching the 
connection log to locate the copy of the security association further comprises: 

means for retrieving at least one previous connection from the connection log; and 
means for identifying one of said at least one previous coimection as the copy of the 
security association. 

8 1 . (Currently Amended) A graphical user interface comprising: 
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a first region of a video display connected to the wireless device, the first region 
including a display list storing at least one previous connection between the wireless device and 
the nearby wireless device, 

wherein a user operates an input device connected to the wireless device to identify one 
of said at least one previous connection as a selected previous connection, and 

wherein the user operates the input device connected to the wireless device to launch the 
application program stored in a memory including a middleware layer and associated with the 
selected previous coimection, configure the secure connection using the security parameters 
associated with the selected previous coimection, and communicate over the secure connection 
with the counterpart application program. 

82. (Original) The graphical user interface of claim 8 1 , wherein a memory 
connected to the wireless device stores a cormection log that includes coimection data, and 
wherein the coimection data populates the display list. 

83 . (Original) The graphical user interface of claim 8 1 , wherein to identify one of 
said at least at least one previous connection as the selected previous connection, the user selects 
an item in the display list by highlighting the item, displaying the item in reverse video, or 
displaying the item in a different font type, font size, or font style. 

84. (Original) The graphical user interface of claim 8 1 , wherein the user verifies 
that the selected previous connection is a copy of the entry. 

85. (Currently Amended) Apparatus, comprising: 

a first network element for storing an appUcation directory in a memory 
including a middleware laver. the directory having at least one entry, each entry including an 
application program identifier, attributes, and security parameters; 

a second network element for determining a priority for each entry in the 
application directory; 

a third network element for identifying a selected entry based on the priority; 
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a fourth network element for examining the attributes and the security parameters 
for the selected entry; and 

a fifth network element for i ndependently establishing a security association to 
support ^ [a] data communication when the security parameters direct the selected entry to use 
a secure connection. 

Please add the following New Claims 86 and 87. as follows: 

86. (NEW) An apparatus comprising: 
a memory; 

a wireless network interface configured to provide a wireless connection with a nearby 
wireless device; and 

a processor disposed in communication with the memory device, the processor 
configured to: 

store an application directory in a middleware layer, the directory having at least one 
entry, each entry including at least an application program identifier, attributes, and security 
parameters; 

exchange the application directory data with the nearby wireless device over the wireless 
connection to form a distributed application directory; 

determine a priority for each entry in the distributed application directory; 

select an entry based on the priorities determined for each entry in the distributed 
apphcation directory; 

examine the attributes and the security parameters associated with the selected entry to 
establish a data communication for connecting with an apphcation in the nearby device 
corresponding with the selected entry, and 

independently establish a security association to support the data communication 
connection when the selected entry includes security parameters directing use of a secure 
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connection satisfying the security parameters when connecting with the application in the nearby 
device. 

87. (NEW) The apparatus of claim 86 wherein the processor is further configured to 
determine whether there already exists a security association with the nearby device that is 
compliant and meets a security level associated with the parameters of the selected entry. 
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